4.8
Medium
CVE-2025-31976 HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while…
Description
HCL BigFix Service Management (SM) is vulnerable to insufficiently protected credentials for a short duration while communicating with a backend, internal application which could allow an attacker to potentially misuse them, if exfiltrated. .
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| BigFix Service Management (SM) | 23 | No fix stated |
Other CVEs of BigFix Service Management (SM)
The 9 CVEs of BigFix Service Management (SM) →
CVE-2025-31974
HCL BigFix Service Management (SM) is susceptible to a Root File System Not Mounted as Read-Only
3.9
Low
CVE-2025-31978
HCL BigFix Service Management (SM) does not adequately sanitize or safely render spreadsheet files (CSV, XLS, XLSX)…
4.6
Medium
CVE-2025-31959
HCL BigFix Service Management (SM) application fails to strip EXIF metadata from uploaded images
3.5
Low
CVE-2025-31982
HCL BigFix Service Management (SM) had directories that were not linked or publicly visible but could be accessed…
3.7
Low